Re: [AFMUG] New IP block
1.If you can research where the block came from that will help. Was it assigned somewhere else? Or is it part of space IANA released? 2.Make sure your POCs are up to date. 3.Make sure you have a reverse DNS server setup. Very important if you have mail servers you are going to put on these blocks. 4.Once you have the blocks notify your upstreams. 5.Subscribe to something like BGPmon to make your life simpler. Just some things off the top of my head. Justin Wilson j...@mtin.net --- http://www.mtin.net Owner/CEO xISP Solutions- Consulting – Data Centers - Bandwidth http://www.midwest-ix.com COO/Chairman Internet Exchange - Peering - Distributed Fabric > On Mar 31, 2017, at 8:17 PM, Jason McKemie > wrote: > > So, Paul's thread has me a bit concerned about activating a new IP block that > I got through ARIN. Up to this point I've just used addresses delegated by my > upstream. In the next few weeks I'm going to be bringing my own addresses > on-net. > > Anyone have a "checklist" of things that need be done to get this working > correctly?
Re: [AFMUG] New IP block
Make sure origin ASN is established correctly in Arin. Erich Kaiser North Central Tower er...@northcentraltower.com Office: 630-621-4804 Cell: 630-777-9291 On Fri, Mar 31, 2017 at 7:30 PM, Justin Wilson wrote: > 1.If you can research where the block came from that will help. Was it > assigned somewhere else? Or is it part of space IANA released? > 2.Make sure your POCs are up to date. > 3.Make sure you have a reverse DNS server setup. Very important if you > have mail servers you are going to put on these blocks. > 4.Once you have the blocks notify your upstreams. > 5.Subscribe to something like BGPmon to make your life simpler. > > Just some things off the top of my head. > > > > Justin Wilson > j...@mtin.net > > --- > http://www.mtin.net Owner/CEO > xISP Solutions- Consulting – Data Centers - Bandwidth > > http://www.midwest-ix.com COO/Chairman > Internet Exchange - Peering - Distributed Fabric > > > On Mar 31, 2017, at 8:17 PM, Jason McKemie < > j.mcke...@veloxinetbroadband.com> wrote: > > > > So, Paul's thread has me a bit concerned about activating a new IP block > that I got through ARIN. Up to this point I've just used addresses > delegated by my upstream. In the next few weeks I'm going to be bringing > my own addresses on-net. > > > > Anyone have a "checklist" of things that need be done to get this > working correctly? > >
Re: [AFMUG] New IP block
There is also a list of geo response sites that you should make sure are updated with your new geo information for your block. I didn’t know about that and all of the major streaming services banned all of my blocks one day, causing a ton of phone calls. It cost me a few customers and lots of grief with a handful of streaming service (mostly VUDU, they were the worst). Apparently most if not all of these streaming services use a handful of these geo services/databases to determine if your IP address/block is out of country or area. Then they blacklist the entire IP block in their systems. They thought ALL of my customers were doing VPNs from some other country. Though I never figured out where they thought it was from and ARIN had all my correct info. I had to talk to each provider directly, and update a few of these main GEO services directly. Eventually, like as in months, it worked out and I no longer have those problems. From: Af [mailto:af-boun...@afmug.com] On Behalf Of Jason McKemie Sent: Friday, March 31, 2017 6:17 PM To: af@afmug.com Subject: [AFMUG] New IP block So, Paul's thread has me a bit concerned about activating a new IP block that I got through ARIN. Up to this point I've just used addresses delegated by my upstream. In the next few weeks I'm going to be bringing my own addresses on-net. Anyone have a "checklist" of things that need be done to get this working correctly?
Re: [AFMUG] New IP block
The list I remember was more extensive, but here's one that's ringing a bell. https://web-beta.archive.org/web/20130122055317/http://nanog.cluepon.net/index.php/GeoIP - Mike Hammett Intelligent Computing Solutions Midwest Internet Exchange The Brothers WISP - Original Message - From: "Sterling Jacobson" To: af@afmug.com Sent: Friday, March 31, 2017 8:38:03 PM Subject: Re: [AFMUG] New IP block There is also a list of geo response sites that you should make sure are updated with your new geo information for your block. I didn’t know about that and all of the major streaming services banned all of my blocks one day, causing a ton of phone calls. It cost me a few customers and lots of grief with a handful of streaming service (mostly VUDU, they were the worst). Apparently most if not all of these streaming services use a handful of these geo services/databases to determine if your IP address/block is out of country or area. Then they blacklist the entire IP block in their systems. They thought ALL of my customers were doing VPNs from some other country. Though I never figured out where they thought it was from and ARIN had all my correct info. I had to talk to each provider directly, and update a few of these main GEO services directly. Eventually, like as in months, it worked out and I no longer have those problems. From: Af [mailto:af-boun...@afmug.com] On Behalf Of Jason McKemie Sent: Friday, March 31, 2017 6:17 PM To: af@afmug.com Subject: [AFMUG] New IP block So, Paul's thread has me a bit concerned about activating a new IP block that I got through ARIN. Up to this point I've just used addresses delegated by my upstream. In the next few weeks I'm going to be bringing my own addresses on-net. Anyone have a "checklist" of things that need be done to get this working correctly?
Re: [AFMUG] New IP block
Thanks for the replies. I bought the IPs at auction, so they were assigned elsewhere previously. All POC information has been updated. I'm going to have DNS setup sometime soon, but my email is run on Google Apps, so I don't think that will be necessary - correct me if I am wrong. What does BGPmon do exactly? On Friday, March 31, 2017, Justin Wilson wrote: > 1.If you can research where the block came from that will help. Was it > assigned somewhere else? Or is it part of space IANA released? > 2.Make sure your POCs are up to date. > 3.Make sure you have a reverse DNS server setup. Very important if you > have mail servers you are going to put on these blocks. > 4.Once you have the blocks notify your upstreams. > 5.Subscribe to something like BGPmon to make your life simpler. > > Just some things off the top of my head. > > > > Justin Wilson > j...@mtin.net > > --- > http://www.mtin.net Owner/CEO > xISP Solutions- Consulting – Data Centers - Bandwidth > > http://www.midwest-ix.com COO/Chairman > Internet Exchange - Peering - Distributed Fabric > > > On Mar 31, 2017, at 8:17 PM, Jason McKemie < > j.mcke...@veloxinetbroadband.com > wrote: > > > > So, Paul's thread has me a bit concerned about activating a new IP block > that I got through ARIN. Up to this point I've just used addresses > delegated by my upstream. In the next few weeks I'm going to be bringing > my own addresses on-net. > > > > Anyone have a "checklist" of things that need be done to get this > working correctly? > >
Re: [AFMUG] New IP block
Prefix hijack notifications, peer changes, etc. Hijack includes more specific advertisements. Say you have a /22 and some dickbag starts advertising one of your /24s. On 4/1/2017 12:42 AM, Jason McKemie wrote: What does BGPmon do exactly?
Re: [AFMUG] New IP block
For new IP blocks it is great for letting you know if someone else is advertising it somewhere without digging through the global routing table. Justin Wilson j...@mtin.net --- http://www.mtin.net Owner/CEO xISP Solutions- Consulting – Data Centers - Bandwidth http://www.midwest-ix.com COO/Chairman Internet Exchange - Peering - Distributed Fabric > On Apr 1, 2017, at 2:05 AM, George Skorup wrote: > > Prefix hijack notifications, peer changes, etc. Hijack includes more specific > advertisements. Say you have a /22 and some dickbag starts advertising one of > your /24s. > > On 4/1/2017 12:42 AM, Jason McKemie wrote: >> What does BGPmon do exactly? >
Re: [AFMUG] New IP block
So, a couple questions on the GeoIP information. Where do you update the GeoIP information for Google? I can't seem to find anywhere to look it up. Same goes for Akamai. www.geoiptool.com is listing my block as being in Northbrook, IL although I'm not sure what database they're pulling from to update. All the other sites that I've been able to check are showing the correct information. -Jason On Fri, Mar 31, 2017 at 10:13 PM, Mike Hammett wrote: > The list I remember was more extensive, but here's one that's ringing a > bell. > > > https://web-beta.archive.org/web/20130122055317/http:// > nanog.cluepon.net/index.php/GeoIP > > > > - > Mike Hammett > Intelligent Computing Solutions <http://www.ics-il.com/> > <https://www.facebook.com/ICSIL> > <https://plus.google.com/+IntelligentComputingSolutionsDeKalb> > <https://www.linkedin.com/company/intelligent-computing-solutions> > <https://twitter.com/ICSIL> > Midwest Internet Exchange <http://www.midwest-ix.com/> > <https://www.facebook.com/mdwestix> > <https://www.linkedin.com/company/midwest-internet-exchange> > <https://twitter.com/mdwestix> > The Brothers WISP <http://www.thebrotherswisp.com/> > <https://www.facebook.com/thebrotherswisp> > > > <https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg> > -- > *From: *"Sterling Jacobson" > *To: *af@afmug.com > *Sent: *Friday, March 31, 2017 8:38:03 PM > *Subject: *Re: [AFMUG] New IP block > > > There is also a list of geo response sites that you should make sure are > updated with your new geo information for your block. > > > > I didn’t know about that and all of the major streaming services banned > all of my blocks one day, causing a ton of phone calls. > > > > It cost me a few customers and lots of grief with a handful of streaming > service (mostly VUDU, they were the worst). > > > > Apparently most if not all of these streaming services use a handful of > these geo services/databases to determine if your IP address/block is out > of country or area. > > > > Then they blacklist the entire IP block in their systems. > > > > They thought ALL of my customers were doing VPNs from some other country. > > > > Though I never figured out where they thought it was from and ARIN had all > my correct info. > > > > I had to talk to each provider directly, and update a few of these main > GEO services directly. > > > > Eventually, like as in months, it worked out and I no longer have those > problems. > > > > > > > > *From:* Af [mailto:af-boun...@afmug.com] *On Behalf Of *Jason McKemie > *Sent:* Friday, March 31, 2017 6:17 PM > *To:* af@afmug.com > *Subject:* [AFMUG] New IP block > > > > So, Paul's thread has me a bit concerned about activating a new IP block > that I got through ARIN. Up to this point I've just used addresses > delegated by my upstream. In the next few weeks I'm going to be bringing > my own addresses on-net. > > > > Anyone have a "checklist" of things that need be done to get this working > correctly? > >
Re: [AFMUG] New IP block
For Akamai try emailing nocc-...@akamai.com <mailto:nocc-...@akamai.com> to open a ticket with them. Might get you somewhere. Mark > On Apr 3, 2017, at 2:25 AM, Jason McKemie > wrote: > > So, a couple questions on the GeoIP information. > > Where do you update the GeoIP information for Google? I can't seem to find > anywhere to look it up. > > Same goes for Akamai. > > www.geoiptool.com <http://www.geoiptool.com/> is listing my block as being in > Northbrook, IL although I'm not sure what database they're pulling from to > update. > > All the other sites that I've been able to check are showing the correct > information. > > -Jason > > On Fri, Mar 31, 2017 at 10:13 PM, Mike Hammett <mailto:af...@ics-il.net>> wrote: > The list I remember was more extensive, but here's one that's ringing a bell. > > > https://web-beta.archive.org/web/20130122055317/http://nanog.cluepon.net/index.php/GeoIP > > <https://web-beta.archive.org/web/20130122055317/http://nanog.cluepon.net/index.php/GeoIP> > > > > - > Mike Hammett > Intelligent Computing Solutions <http://www.ics-il.com/> > <https://www.facebook.com/ICSIL> > <https://plus.google.com/+IntelligentComputingSolutionsDeKalb> > <https://www.linkedin.com/company/intelligent-computing-solutions> > <https://twitter.com/ICSIL> > Midwest Internet Exchange <http://www.midwest-ix.com/> > <https://www.facebook.com/mdwestix> > <https://www.linkedin.com/company/midwest-internet-exchange> > <https://twitter.com/mdwestix> > The Brothers WISP <http://www.thebrotherswisp.com/> > <https://www.facebook.com/thebrotherswisp> > > > <https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg> > From: "Sterling Jacobson" mailto:sterl...@avative.net>> > To: af@afmug.com <mailto:af@afmug.com> > Sent: Friday, March 31, 2017 8:38:03 PM > Subject: Re: [AFMUG] New IP block > > > There is also a list of geo response sites that you should make sure are > updated with your new geo information for your block. > > > I didn’t know about that and all of the major streaming services banned all > of my blocks one day, causing a ton of phone calls. > > > It cost me a few customers and lots of grief with a handful of streaming > service (mostly VUDU, they were the worst). > > > Apparently most if not all of these streaming services use a handful of these > geo services/databases to determine if your IP address/block is out of > country or area. > > > Then they blacklist the entire IP block in their systems. > > > They thought ALL of my customers were doing VPNs from some other country. > > > Though I never figured out where they thought it was from and ARIN had all my > correct info. > > > I had to talk to each provider directly, and update a few of these main GEO > services directly. > > > Eventually, like as in months, it worked out and I no longer have those > problems. > > > > > From: Af [mailto:af-boun...@afmug.com <mailto:af-boun...@afmug.com>] On > Behalf Of Jason McKemie > Sent: Friday, March 31, 2017 6:17 PM > To: af@afmug.com <mailto:af@afmug.com> > Subject: [AFMUG] New IP block > > > So, Paul's thread has me a bit concerned about activating a new IP block that > I got through ARIN. Up to this point I've just used addresses delegated by my > upstream. In the next few weeks I'm going to be bringing my own addresses > on-net. > > > Anyone have a "checklist" of things that need be done to get this working > correctly? > > >